cvedb.io
CVE-2018-20307
MEDIUM · CVSS 4.3
EPSS exploitation probability: 0%
Published 2018-12-20T09:29:00.477 · Last modified 2026-06-17T01:52:35.750

Summary

Pulse Secure Virtual Traffic Manager 9.9 versions prior to 9.9r2 and 10.4r1 allow a remote authenticated user to obtain sensitive historical activity information by leveraging incorrect permission validation.

Affected products

pulsesecure — virtual_traffic_manager

Does this affect you?

Add your gear to cvedb and we'll alert you only when pulsesecure ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.